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Question: 1 


Which network management protocol relies on multiple connections between a managed device 
and the management station where such connections can be independently initiated by either side? 


A. SSH 

B. SNMP 

C. Telnet 
D. NetFlow 


Answer: B 


Question: 2 


When an IDS generates an alert for a correctly detected network attack, what is this event called? 


A. false positive 
B. true negative 
C. true positive 

D. false negative 


Answer: C 


Question: 3 


When is it recommended to establish a traffic profile baseline for your network? 


A. outside of normal production hours 
B. during a DDoS attack 

C. during normal production hours 

D. during monthly file server backup 


Answer: C 


Question: 4 


Which two activities would you typically be expected to perform as a Network Security Analyst? 
(Choose two.) 


A. Verify user login credentials. 
B. Troubleshoot firewall performance. 
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C. Monitor database applications. 
D. Create security policies on routers. 


Answer: B, D 


Question: 5 


Which protocol is typically considered critical for LAN operation? 


A. BGP 
B. ARP 
C. SMTP 
D. GRE 


Answer: B 


Question: 6 


Which two measures would you recommend to reduce the likelihood of a successfully executed 
network attack from the Internet? (Choose two.) 


A. Completely disconnect the network from the Internet. 

B. Deploy a stateful edge firewall. 

C. Buy an insurance policy against attack-related business losses. 
D. Implement a password management policy for remote users. 


Answer: B, D 


Question: 7 


Which attack exploits incorrect boundary checking in network software? 


A. Slowloris 

B. buffer overflow 

C. man-in-the-middle 
D. Smurf 


Answer: B 
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